From 8b0e735f675524cf8fc736f18fed9c61f9b36258 Mon Sep 17 00:00:00 2001 From: Darryl Sokoloski Date: Fri, 20 Jul 2018 13:26:44 -0400 Subject: Decreased minimum packet payload length down to 19 from 100 for SSDP. The minimum packet payload length is: "NOTIFY * HTTP/1.1" + 0x0d + 0x0a (19 bytes). --- src/lib/protocols/ssdp.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/lib/protocols/ssdp.c b/src/lib/protocols/ssdp.c index ce681d9b6..203edabb9 100644 --- a/src/lib/protocols/ssdp.c +++ b/src/lib/protocols/ssdp.c @@ -45,7 +45,7 @@ void ndpi_search_ssdp(struct ndpi_detection_module_struct *ndpi_struct, struct n NDPI_LOG_DBG(ndpi_struct, "search ssdp\n"); if (packet->udp != NULL) { - if (packet->payload_packet_len > 100) { + if (packet->payload_packet_len >= 19) { if ((memcmp(packet->payload, "M-SEARCH * HTTP/1.1", 19) == 0) || memcmp(packet->payload, "NOTIFY * HTTP/1.1", 17) == 0) { -- cgit v1.2.3 From 212598b45eaf7c00863171974f7da784b03a7db6 Mon Sep 17 00:00:00 2001 From: Darryl Sokoloski Date: Fri, 20 Jul 2018 13:28:38 -0400 Subject: Added example SSDP M-SEARCH capture file. --- tests/pcap/ssdp-m-search.pcap | Bin 0 -> 1525 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 tests/pcap/ssdp-m-search.pcap diff --git a/tests/pcap/ssdp-m-search.pcap b/tests/pcap/ssdp-m-search.pcap new file mode 100644 index 000000000..a71f32227 Binary files /dev/null and b/tests/pcap/ssdp-m-search.pcap differ -- cgit v1.2.3